Network Security

I'm having a problem with a SSL Policy, which I use to analyze SMTPS traffic with a Firepower sensor managed by FMC. I have my own mail server inside my LAN, so I want to analyze incoming SMTPS traffic with the Decrypt (Known Key) method, as I own th...

Hello, Over the past couple of months I've had a couple of incidents, once where the FMC was down for a RAM upgrade and another where it lost Internet access. On both occasions, we lost the ability to browse most websites (we use Firepower as a basic...

Hello,I need to configure SSL VPN with certificate authentication in ASA but I am having some issues to find a detailed guide about how to do it. As far I know, I just need to specify Certificate as Authentication Method in the Profile, install the c...

Hi, I am applying solution to protect credit card transaction so that any credit related traffic should not leave company environment. I think this is possible with IPS for  sensitive Data detection. I have default policy Balance Security and connect...

I don’t have any issues when I bypass my ASA firewall and use my U-verse WiFi to connect to Webex.  When I look at the log when trying to connect to Webex, I see a bunch of icmp packets being blocked.  Has anyone seen this issue with Webex?

Greetings,       I am using Cisco Firepower Management Center and have an existing network list created for blacklisted IP addresses.  Problem is when I try to upload an updated list from the location I have used for the past 3 years, the number of a...

Hello Community, I want to upgrade an Active/Standby Cluster from version 9.6(4)36 to 9.12(3)2My question: Do I have to pay attention to something here, because the major release is changed? Or is this Straight Forward: - Secondary Unit Update- Resta...

I'm running into an issue with our ASA that just started this weekend. Prior to this, everything was working fine and I am not sure what could have changed if anything. This ASA only is used for AnyConnect. Everything works fine and then all of a sud...

Hi , i did some research and found some article saying mutli-vendor FW is outdated and should not be used anymore. Saying that with NGFW, its okay to use single vendor .link:http://techgenix.com/firewalls/ I didn't see any guide reference to use mult...

Could someone here please help me answer this question: have a 6504E running on 15.5(1)SY5 (latest) and need to know if its KEX algorithms can be updated somehow to a more modern set, currently only supporting diffie-hellman-group-exchange-sha1.  Tha...

Hi, object-group service DM_INLINE_SERVICE_1service-object object 8069access-list Outside_access_in extended permit object-group DM_INLINE_SERVICE_1 any object Obj-192.168.100.100object network 192.168.100.100nat (DMZ,Outside) static 1.1.1.1 users ar...

Hi All, I have some probleme with our connction.Early last week, our monitoring server in the inside zone could not reach the ASA device.The server also cannot ping the IP interface inside and vice versa. HW: ASA5585-SSP-10SW: v9.8(2)38 Topology: [Se...